Vulnerability from csaf_opensuse
Published
2022-03-03 19:01
Modified
2022-03-03 19:01
Summary
Security update for bitcoin
Notes
Title of the patch
Security update for bitcoin
Description of the patch
This update for bitcoin fixes the following issues:
Update to version 0.21.2
* P2P protocol and network code
* use NetPermissions::HasFlag() in CConnman::Bind()
* Rate limit the processing of rumoured addresses
* Wallet
* Do not iterate a directory if having an error while accessing it
* RPC
* Reset scantxoutset progress before inferring descriptors
* Build System
* depends: update Qt 5.9 source url
* Update Windows code signing certificate
* Use custom MacOS code signing tool
* Fix build with Boost 1.77.0
* Tests and QA
* Build with --enable-werror by default, and document exceptions
* Fix intermittent feature_taproot issue
* Fix macOS brew install command
* add missing ECCVerifyHandle to base_encode_decode
* Run fuzzer task for the master branch only
* GUI
* Do not use QClipboard::Selection on Windows and macOS.
* Remove user input from URI error message
* Draw 'eye' sign at the beginning of watch-only addresses
* Miscellaneous
* Fix crash when parsing command line with -noincludeconf=0
* util: Properly handle -noincludeconf on command line (take 2)
Update to version 0.21.1
* Consensus:
* Speedy trial support for versionbits
* Speedy trial activation parameters for Taproot
* P2P protocol and network code
* allow CSubNet of non-IP networks
* Avoid UBSan warning in ProcessMessage
* Wallet
* Introduce DeferredSignatureChecker and have
SignatureExtractorClass subclass it
* Avoid requesting fee rates multiple times during coin selection
* RPC and other APIs:
* Disallow sendtoaddress and sendmany when private keys disabled
CVE-2021-3195
Update to version 0.21.0:
* For full details see release-notes-0.21.0.md
Update to version 0.20.1
* Mining
* Fix GBT: Restore '!segwit' and 'csv' to 'rules' key
* P2P protocol and network code
* Replace automatic bans with discouragement filter
* Wallet
* Handle concurrent wallet loading
* Minimal fix to restore conflicted transaction notifications
* RPC and other APIs
* Increment input value sum only once per UTXO in decodepsbt
* psbt: Increment input value sum only once per UTXO in decodepsbt
* psbt: Include and allow both non_witness_utxo and witness_utxo for segwit inputs
* GUI
* Add missing QPainterPath include
* update Qt base translations for macOS release
* Misc
* util: Don't reference errno when pthread fails
* Fix locking on WSL using flock instead of fcntl
Update to version 0.20.0:
* See https://github.com/bitcoin/bitcoin/blob/master/doc/release-notes/release-notes-0.20.0.md
- Do not run bitcoind in daemon mode. Running it not as a
background process makes it working properly with journald
(instead of writing logs in /var/log).
Update to version 0.19.1:
* Wallet
* Fix origfee return for bumpfee with feerate arg
* Fix unique_ptr usage in boost::signals2
* Fix issue with conflicted mempool tx in listsinceblock
* Bug: IsUsedDestination shouldn't use key id as script id for
ScriptHash
* IsUsedDestination should count any known single-key address
* Reset reused transactions cache
* RPC and other APIs
* cli: Fix fatal leveldb error when specifying
-blockfilterindex=basic twice
* require second argument only for scantxoutset start action
* zmq: Fix due to invalid argument and multiple notifiers
* psbt: handle unspendable psbts
* psbt: check that various indexes and amounts are within
bounds
* GUI
* Fix missing qRegisterMetaType for size_t
* disable File->CreateWallet during startup
* Fix comparison function signature
* Fix unintialized WalletView::progressDialog
* Tests and QA
* Appveyor improvement - text file for vcpkg package list
* fix 'bitcoind already running' warnings on macOS
* add missing #include to fix compiler errors
* Platform support
* Update msvc build for Visual Studio 2019 v16.4
* Updates to appveyor config for VS2019 and Qt5.9.8 + msvc
project fixes
* bug-fix macos: give free bytes to F_PREALLOCATE
* Miscellaneous
* init: Stop indexes on shutdown after ChainStateFlushed
callback
* util: Add missing headers to util/fees.cpp
* Unbreak build with Boost 1.72.0
* scripts: Fix symbol-check & security-check argument passing
* Log to net category for exceptions in ProcessMessages
* Update univalue subtree
Patchnames
openSUSE-2022-72
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Security update for bitcoin", title: "Title of the patch", }, { category: "description", text: "This update for bitcoin fixes the following issues:\n\nUpdate to version 0.21.2\n\n* P2P protocol and network code\n * use NetPermissions::HasFlag() in CConnman::Bind()\n * Rate limit the processing of rumoured addresses\n* Wallet\n * Do not iterate a directory if having an error while accessing it\n* RPC\n * Reset scantxoutset progress before inferring descriptors\n* Build System\n * depends: update Qt 5.9 source url\n * Update Windows code signing certificate\n * Use custom MacOS code signing tool\n * Fix build with Boost 1.77.0\n* Tests and QA\n * Build with --enable-werror by default, and document exceptions\n * Fix intermittent feature_taproot issue\n * Fix macOS brew install command\n * add missing ECCVerifyHandle to base_encode_decode\n * Run fuzzer task for the master branch only\n* GUI\n * Do not use QClipboard::Selection on Windows and macOS.\n * Remove user input from URI error message\n * Draw 'eye' sign at the beginning of watch-only addresses\n* Miscellaneous\n * Fix crash when parsing command line with -noincludeconf=0\n * util: Properly handle -noincludeconf on command line (take 2)\n\nUpdate to version 0.21.1\n\n* Consensus:\n * Speedy trial support for versionbits\n * Speedy trial activation parameters for Taproot\n* P2P protocol and network code\n * allow CSubNet of non-IP networks\n * Avoid UBSan warning in ProcessMessage\n* Wallet\n * Introduce DeferredSignatureChecker and have\n SignatureExtractorClass subclass it\n * Avoid requesting fee rates multiple times during coin selection\n* RPC and other APIs:\n * Disallow sendtoaddress and sendmany when private keys disabled\n CVE-2021-3195\n\nUpdate to version 0.21.0:\n\n* For full details see release-notes-0.21.0.md\n\nUpdate to version 0.20.1\n\n* Mining\n * Fix GBT: Restore '!segwit' and 'csv' to 'rules' key\n* P2P protocol and network code\n * Replace automatic bans with discouragement filter\n* Wallet\n * Handle concurrent wallet loading\n * Minimal fix to restore conflicted transaction notifications \n* RPC and other APIs\n * Increment input value sum only once per UTXO in decodepsbt\n * psbt: Increment input value sum only once per UTXO in decodepsbt\n * psbt: Include and allow both non_witness_utxo and witness_utxo for segwit inputs\n* GUI\n * Add missing QPainterPath include\n * update Qt base translations for macOS release\n* Misc\n * util: Don't reference errno when pthread fails\n * Fix locking on WSL using flock instead of fcntl\n\nUpdate to version 0.20.0:\n\n* See https://github.com/bitcoin/bitcoin/blob/master/doc/release-notes/release-notes-0.20.0.md\n\n- Do not run bitcoind in daemon mode. Running it not as a\n background process makes it working properly with journald\n (instead of writing logs in /var/log).\n\nUpdate to version 0.19.1:\n\n* Wallet\n * Fix origfee return for bumpfee with feerate arg\n * Fix unique_ptr usage in boost::signals2\n * Fix issue with conflicted mempool tx in listsinceblock\n * Bug: IsUsedDestination shouldn't use key id as script id for\n ScriptHash\n * IsUsedDestination should count any known single-key address\n * Reset reused transactions cache\n* RPC and other APIs\n * cli: Fix fatal leveldb error when specifying\n -blockfilterindex=basic twice\n * require second argument only for scantxoutset start action\n * zmq: Fix due to invalid argument and multiple notifiers\n * psbt: handle unspendable psbts\n * psbt: check that various indexes and amounts are within\n bounds\n* GUI\n * Fix missing qRegisterMetaType for size_t\n * disable File->CreateWallet during startup\n * Fix comparison function signature\n * Fix unintialized WalletView::progressDialog\n* Tests and QA\n * Appveyor improvement - text file for vcpkg package list\n * fix 'bitcoind already running' warnings on macOS\n * add missing #include to fix compiler errors\n* Platform support\n * Update msvc build for Visual Studio 2019 v16.4\n * Updates to appveyor config for VS2019 and Qt5.9.8 + msvc\n project fixes\n * bug-fix macos: give free bytes to F_PREALLOCATE\n* Miscellaneous\n * init: Stop indexes on shutdown after ChainStateFlushed\n callback\n * util: Add missing headers to util/fees.cpp\n * Unbreak build with Boost 1.72.0\n * scripts: Fix symbol-check & security-check argument passing\n * Log to net category for exceptions in ProcessMessages\n * Update univalue subtree\n", title: "Description of the patch", }, { category: "details", text: "openSUSE-2022-72", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2022_0072-1.json", }, { category: "self", summary: "URL for openSUSE-SU-2022:0072-1", url: "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZQOIWU7XODRDIITDKWB45QLM5US3ATJW/", }, { category: "self", summary: "E-Mail link for openSUSE-SU-2022:0072-1", url: "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZQOIWU7XODRDIITDKWB45QLM5US3ATJW/", }, { category: "self", summary: "SUSE CVE CVE-2021-3195 page", url: "https://www.suse.com/security/cve/CVE-2021-3195/", }, ], title: "Security update for bitcoin", tracking: { current_release_date: "2022-03-03T19:01:19Z", generator: { date: "2022-03-03T19:01:19Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "openSUSE-SU-2022:0072-1", initial_release_date: "2022-03-03T19:01:19Z", revision_history: [ { date: "2022-03-03T19:01:19Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "bitcoin-qt5-0.21.2-bp153.2.3.1.aarch64", product: { name: "bitcoin-qt5-0.21.2-bp153.2.3.1.aarch64", product_id: "bitcoin-qt5-0.21.2-bp153.2.3.1.aarch64", }, }, { category: "product_version", name: "bitcoin-test-0.21.2-bp153.2.3.1.aarch64", product: { name: "bitcoin-test-0.21.2-bp153.2.3.1.aarch64", product_id: "bitcoin-test-0.21.2-bp153.2.3.1.aarch64", }, }, { category: "product_version", name: "bitcoin-utils-0.21.2-bp153.2.3.1.aarch64", product: { name: "bitcoin-utils-0.21.2-bp153.2.3.1.aarch64", product_id: "bitcoin-utils-0.21.2-bp153.2.3.1.aarch64", }, }, { category: "product_version", name: "bitcoind-0.21.2-bp153.2.3.1.aarch64", product: { name: "bitcoind-0.21.2-bp153.2.3.1.aarch64", product_id: "bitcoind-0.21.2-bp153.2.3.1.aarch64", }, }, { category: "product_version", name: "libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.aarch64", product: { name: "libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.aarch64", product_id: "libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.aarch64", }, }, { category: "product_version", name: "libbitcoinconsensus0-0.21.2-bp153.2.3.1.aarch64", product: { name: "libbitcoinconsensus0-0.21.2-bp153.2.3.1.aarch64", product_id: "libbitcoinconsensus0-0.21.2-bp153.2.3.1.aarch64", }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "bitcoin-qt5-0.21.2-bp153.2.3.1.ppc64le", product: { name: "bitcoin-qt5-0.21.2-bp153.2.3.1.ppc64le", product_id: "bitcoin-qt5-0.21.2-bp153.2.3.1.ppc64le", }, }, { category: "product_version", name: "bitcoin-test-0.21.2-bp153.2.3.1.ppc64le", product: { name: "bitcoin-test-0.21.2-bp153.2.3.1.ppc64le", product_id: "bitcoin-test-0.21.2-bp153.2.3.1.ppc64le", }, }, { category: "product_version", name: "bitcoin-utils-0.21.2-bp153.2.3.1.ppc64le", product: { name: "bitcoin-utils-0.21.2-bp153.2.3.1.ppc64le", product_id: "bitcoin-utils-0.21.2-bp153.2.3.1.ppc64le", }, }, { category: "product_version", name: "bitcoind-0.21.2-bp153.2.3.1.ppc64le", product: { name: "bitcoind-0.21.2-bp153.2.3.1.ppc64le", product_id: "bitcoind-0.21.2-bp153.2.3.1.ppc64le", }, }, { category: "product_version", name: "libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.ppc64le", product: { name: "libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.ppc64le", product_id: "libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.ppc64le", }, }, { category: "product_version", name: "libbitcoinconsensus0-0.21.2-bp153.2.3.1.ppc64le", product: { name: "libbitcoinconsensus0-0.21.2-bp153.2.3.1.ppc64le", product_id: "libbitcoinconsensus0-0.21.2-bp153.2.3.1.ppc64le", }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "bitcoin-qt5-0.21.2-bp153.2.3.1.s390x", product: { name: "bitcoin-qt5-0.21.2-bp153.2.3.1.s390x", product_id: "bitcoin-qt5-0.21.2-bp153.2.3.1.s390x", }, }, { category: "product_version", name: "bitcoin-test-0.21.2-bp153.2.3.1.s390x", product: { name: "bitcoin-test-0.21.2-bp153.2.3.1.s390x", product_id: "bitcoin-test-0.21.2-bp153.2.3.1.s390x", }, }, { category: "product_version", name: "bitcoin-utils-0.21.2-bp153.2.3.1.s390x", product: { name: "bitcoin-utils-0.21.2-bp153.2.3.1.s390x", product_id: "bitcoin-utils-0.21.2-bp153.2.3.1.s390x", }, }, { category: "product_version", name: "bitcoind-0.21.2-bp153.2.3.1.s390x", product: { name: "bitcoind-0.21.2-bp153.2.3.1.s390x", product_id: "bitcoind-0.21.2-bp153.2.3.1.s390x", }, }, { category: "product_version", name: "libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.s390x", product: { name: "libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.s390x", product_id: "libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.s390x", }, }, { category: "product_version", name: "libbitcoinconsensus0-0.21.2-bp153.2.3.1.s390x", product: { name: "libbitcoinconsensus0-0.21.2-bp153.2.3.1.s390x", product_id: "libbitcoinconsensus0-0.21.2-bp153.2.3.1.s390x", }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "bitcoin-qt5-0.21.2-bp153.2.3.1.x86_64", product: { name: "bitcoin-qt5-0.21.2-bp153.2.3.1.x86_64", product_id: "bitcoin-qt5-0.21.2-bp153.2.3.1.x86_64", }, }, { category: "product_version", name: "bitcoin-test-0.21.2-bp153.2.3.1.x86_64", product: { name: "bitcoin-test-0.21.2-bp153.2.3.1.x86_64", product_id: "bitcoin-test-0.21.2-bp153.2.3.1.x86_64", }, }, { category: "product_version", name: "bitcoin-utils-0.21.2-bp153.2.3.1.x86_64", product: { name: "bitcoin-utils-0.21.2-bp153.2.3.1.x86_64", product_id: "bitcoin-utils-0.21.2-bp153.2.3.1.x86_64", }, }, { category: "product_version", name: "bitcoind-0.21.2-bp153.2.3.1.x86_64", product: { name: "bitcoind-0.21.2-bp153.2.3.1.x86_64", product_id: "bitcoind-0.21.2-bp153.2.3.1.x86_64", }, }, { category: "product_version", name: "libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.x86_64", product: { name: "libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.x86_64", product_id: "libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.x86_64", }, }, { category: "product_version", name: "libbitcoinconsensus0-0.21.2-bp153.2.3.1.x86_64", product: { name: "libbitcoinconsensus0-0.21.2-bp153.2.3.1.x86_64", product_id: "libbitcoinconsensus0-0.21.2-bp153.2.3.1.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "SUSE Package Hub 15 SP3", product: { name: "SUSE Package Hub 15 SP3", product_id: "SUSE Package Hub 15 SP3", }, }, { category: "product_name", name: "openSUSE Leap 15.3", product: { name: "openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3", product_identification_helper: { cpe: "cpe:/o:opensuse:leap:15.3", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "bitcoin-qt5-0.21.2-bp153.2.3.1.aarch64 as component of SUSE Package Hub 15 SP3", product_id: "SUSE Package Hub 15 SP3:bitcoin-qt5-0.21.2-bp153.2.3.1.aarch64", }, product_reference: "bitcoin-qt5-0.21.2-bp153.2.3.1.aarch64", relates_to_product_reference: "SUSE Package Hub 15 SP3", }, { category: "default_component_of", full_product_name: { name: "bitcoin-qt5-0.21.2-bp153.2.3.1.ppc64le as component of SUSE Package Hub 15 SP3", product_id: "SUSE Package Hub 15 SP3:bitcoin-qt5-0.21.2-bp153.2.3.1.ppc64le", }, product_reference: "bitcoin-qt5-0.21.2-bp153.2.3.1.ppc64le", relates_to_product_reference: "SUSE Package Hub 15 SP3", }, { category: "default_component_of", full_product_name: { name: "bitcoin-qt5-0.21.2-bp153.2.3.1.s390x as component of SUSE Package Hub 15 SP3", product_id: "SUSE Package Hub 15 SP3:bitcoin-qt5-0.21.2-bp153.2.3.1.s390x", }, product_reference: "bitcoin-qt5-0.21.2-bp153.2.3.1.s390x", relates_to_product_reference: "SUSE Package Hub 15 SP3", }, { category: "default_component_of", full_product_name: { name: "bitcoin-qt5-0.21.2-bp153.2.3.1.x86_64 as component of SUSE Package Hub 15 SP3", product_id: "SUSE Package Hub 15 SP3:bitcoin-qt5-0.21.2-bp153.2.3.1.x86_64", }, product_reference: "bitcoin-qt5-0.21.2-bp153.2.3.1.x86_64", relates_to_product_reference: "SUSE Package Hub 15 SP3", }, { category: "default_component_of", full_product_name: { name: "bitcoin-test-0.21.2-bp153.2.3.1.aarch64 as component of SUSE Package Hub 15 SP3", product_id: "SUSE Package Hub 15 SP3:bitcoin-test-0.21.2-bp153.2.3.1.aarch64", }, product_reference: "bitcoin-test-0.21.2-bp153.2.3.1.aarch64", relates_to_product_reference: "SUSE Package Hub 15 SP3", }, { category: "default_component_of", full_product_name: { name: "bitcoin-test-0.21.2-bp153.2.3.1.ppc64le as component of SUSE Package Hub 15 SP3", product_id: "SUSE Package Hub 15 SP3:bitcoin-test-0.21.2-bp153.2.3.1.ppc64le", }, product_reference: "bitcoin-test-0.21.2-bp153.2.3.1.ppc64le", relates_to_product_reference: "SUSE Package Hub 15 SP3", }, { category: "default_component_of", full_product_name: { name: "bitcoin-test-0.21.2-bp153.2.3.1.s390x as component of SUSE Package Hub 15 SP3", product_id: "SUSE Package Hub 15 SP3:bitcoin-test-0.21.2-bp153.2.3.1.s390x", }, product_reference: "bitcoin-test-0.21.2-bp153.2.3.1.s390x", relates_to_product_reference: "SUSE Package Hub 15 SP3", }, { category: "default_component_of", full_product_name: { name: "bitcoin-test-0.21.2-bp153.2.3.1.x86_64 as component of SUSE Package Hub 15 SP3", product_id: "SUSE Package Hub 15 SP3:bitcoin-test-0.21.2-bp153.2.3.1.x86_64", }, product_reference: "bitcoin-test-0.21.2-bp153.2.3.1.x86_64", relates_to_product_reference: "SUSE Package Hub 15 SP3", }, { category: "default_component_of", full_product_name: { name: "bitcoin-utils-0.21.2-bp153.2.3.1.aarch64 as component of SUSE Package Hub 15 SP3", product_id: "SUSE Package Hub 15 SP3:bitcoin-utils-0.21.2-bp153.2.3.1.aarch64", }, product_reference: "bitcoin-utils-0.21.2-bp153.2.3.1.aarch64", relates_to_product_reference: "SUSE Package Hub 15 SP3", }, { category: "default_component_of", full_product_name: { name: "bitcoin-utils-0.21.2-bp153.2.3.1.ppc64le as component of SUSE Package Hub 15 SP3", product_id: "SUSE Package Hub 15 SP3:bitcoin-utils-0.21.2-bp153.2.3.1.ppc64le", }, product_reference: "bitcoin-utils-0.21.2-bp153.2.3.1.ppc64le", relates_to_product_reference: "SUSE Package Hub 15 SP3", }, { category: "default_component_of", full_product_name: { name: "bitcoin-utils-0.21.2-bp153.2.3.1.s390x as component of SUSE Package Hub 15 SP3", product_id: "SUSE Package Hub 15 SP3:bitcoin-utils-0.21.2-bp153.2.3.1.s390x", }, product_reference: "bitcoin-utils-0.21.2-bp153.2.3.1.s390x", relates_to_product_reference: "SUSE Package Hub 15 SP3", }, { category: "default_component_of", full_product_name: { name: "bitcoin-utils-0.21.2-bp153.2.3.1.x86_64 as component of SUSE Package Hub 15 SP3", product_id: "SUSE Package Hub 15 SP3:bitcoin-utils-0.21.2-bp153.2.3.1.x86_64", }, product_reference: "bitcoin-utils-0.21.2-bp153.2.3.1.x86_64", relates_to_product_reference: "SUSE Package Hub 15 SP3", }, { category: "default_component_of", full_product_name: { name: "bitcoind-0.21.2-bp153.2.3.1.aarch64 as component of SUSE Package Hub 15 SP3", product_id: "SUSE Package Hub 15 SP3:bitcoind-0.21.2-bp153.2.3.1.aarch64", }, product_reference: "bitcoind-0.21.2-bp153.2.3.1.aarch64", relates_to_product_reference: "SUSE Package Hub 15 SP3", }, { category: "default_component_of", full_product_name: { name: "bitcoind-0.21.2-bp153.2.3.1.ppc64le as component of SUSE Package Hub 15 SP3", product_id: "SUSE Package Hub 15 SP3:bitcoind-0.21.2-bp153.2.3.1.ppc64le", }, product_reference: "bitcoind-0.21.2-bp153.2.3.1.ppc64le", relates_to_product_reference: "SUSE Package Hub 15 SP3", }, { category: "default_component_of", full_product_name: { name: "bitcoind-0.21.2-bp153.2.3.1.s390x as component of SUSE Package Hub 15 SP3", product_id: "SUSE Package Hub 15 SP3:bitcoind-0.21.2-bp153.2.3.1.s390x", }, product_reference: "bitcoind-0.21.2-bp153.2.3.1.s390x", relates_to_product_reference: "SUSE Package Hub 15 SP3", }, { category: "default_component_of", full_product_name: { name: "bitcoind-0.21.2-bp153.2.3.1.x86_64 as component of SUSE Package Hub 15 SP3", product_id: "SUSE Package Hub 15 SP3:bitcoind-0.21.2-bp153.2.3.1.x86_64", }, product_reference: "bitcoind-0.21.2-bp153.2.3.1.x86_64", relates_to_product_reference: "SUSE Package Hub 15 SP3", }, { category: "default_component_of", full_product_name: { name: "libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.aarch64 as component of SUSE Package Hub 15 SP3", product_id: "SUSE Package Hub 15 SP3:libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.aarch64", }, product_reference: "libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.aarch64", relates_to_product_reference: "SUSE Package Hub 15 SP3", }, { category: "default_component_of", full_product_name: { name: "libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.ppc64le as component of SUSE Package Hub 15 SP3", product_id: "SUSE Package Hub 15 SP3:libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.ppc64le", }, product_reference: "libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.ppc64le", relates_to_product_reference: "SUSE Package Hub 15 SP3", }, { category: "default_component_of", full_product_name: { name: "libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.s390x as component of SUSE Package Hub 15 SP3", product_id: "SUSE Package Hub 15 SP3:libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.s390x", }, product_reference: "libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.s390x", relates_to_product_reference: "SUSE Package Hub 15 SP3", }, { category: "default_component_of", full_product_name: { name: "libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.x86_64 as component of SUSE Package Hub 15 SP3", product_id: "SUSE Package Hub 15 SP3:libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.x86_64", }, product_reference: "libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.x86_64", relates_to_product_reference: "SUSE Package Hub 15 SP3", }, { category: "default_component_of", full_product_name: { name: "libbitcoinconsensus0-0.21.2-bp153.2.3.1.aarch64 as component of SUSE Package Hub 15 SP3", product_id: "SUSE Package Hub 15 SP3:libbitcoinconsensus0-0.21.2-bp153.2.3.1.aarch64", }, product_reference: "libbitcoinconsensus0-0.21.2-bp153.2.3.1.aarch64", relates_to_product_reference: "SUSE Package Hub 15 SP3", }, { category: "default_component_of", full_product_name: { name: "libbitcoinconsensus0-0.21.2-bp153.2.3.1.ppc64le as component of SUSE Package Hub 15 SP3", product_id: "SUSE Package Hub 15 SP3:libbitcoinconsensus0-0.21.2-bp153.2.3.1.ppc64le", }, product_reference: "libbitcoinconsensus0-0.21.2-bp153.2.3.1.ppc64le", relates_to_product_reference: "SUSE Package Hub 15 SP3", }, { category: "default_component_of", full_product_name: { name: "libbitcoinconsensus0-0.21.2-bp153.2.3.1.s390x as component of SUSE Package Hub 15 SP3", product_id: "SUSE Package Hub 15 SP3:libbitcoinconsensus0-0.21.2-bp153.2.3.1.s390x", }, product_reference: "libbitcoinconsensus0-0.21.2-bp153.2.3.1.s390x", relates_to_product_reference: "SUSE Package Hub 15 SP3", }, { category: "default_component_of", full_product_name: { name: "libbitcoinconsensus0-0.21.2-bp153.2.3.1.x86_64 as component of SUSE Package Hub 15 SP3", product_id: "SUSE Package Hub 15 SP3:libbitcoinconsensus0-0.21.2-bp153.2.3.1.x86_64", }, product_reference: "libbitcoinconsensus0-0.21.2-bp153.2.3.1.x86_64", relates_to_product_reference: "SUSE Package Hub 15 SP3", }, { category: "default_component_of", full_product_name: { name: "bitcoin-qt5-0.21.2-bp153.2.3.1.aarch64 as component of openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3:bitcoin-qt5-0.21.2-bp153.2.3.1.aarch64", }, product_reference: "bitcoin-qt5-0.21.2-bp153.2.3.1.aarch64", relates_to_product_reference: "openSUSE Leap 15.3", }, { category: "default_component_of", full_product_name: { name: "bitcoin-qt5-0.21.2-bp153.2.3.1.ppc64le as component of openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3:bitcoin-qt5-0.21.2-bp153.2.3.1.ppc64le", }, product_reference: "bitcoin-qt5-0.21.2-bp153.2.3.1.ppc64le", relates_to_product_reference: "openSUSE Leap 15.3", }, { category: "default_component_of", full_product_name: { name: "bitcoin-qt5-0.21.2-bp153.2.3.1.s390x as component of openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3:bitcoin-qt5-0.21.2-bp153.2.3.1.s390x", }, product_reference: "bitcoin-qt5-0.21.2-bp153.2.3.1.s390x", relates_to_product_reference: "openSUSE Leap 15.3", }, { category: "default_component_of", full_product_name: { name: "bitcoin-qt5-0.21.2-bp153.2.3.1.x86_64 as component of openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3:bitcoin-qt5-0.21.2-bp153.2.3.1.x86_64", }, product_reference: "bitcoin-qt5-0.21.2-bp153.2.3.1.x86_64", relates_to_product_reference: "openSUSE Leap 15.3", }, { category: "default_component_of", full_product_name: { name: "bitcoin-test-0.21.2-bp153.2.3.1.aarch64 as component of openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3:bitcoin-test-0.21.2-bp153.2.3.1.aarch64", }, product_reference: "bitcoin-test-0.21.2-bp153.2.3.1.aarch64", relates_to_product_reference: "openSUSE Leap 15.3", }, { category: "default_component_of", full_product_name: { name: "bitcoin-test-0.21.2-bp153.2.3.1.ppc64le as component of openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3:bitcoin-test-0.21.2-bp153.2.3.1.ppc64le", }, product_reference: "bitcoin-test-0.21.2-bp153.2.3.1.ppc64le", relates_to_product_reference: "openSUSE Leap 15.3", }, { category: "default_component_of", full_product_name: { name: "bitcoin-test-0.21.2-bp153.2.3.1.s390x as component of openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3:bitcoin-test-0.21.2-bp153.2.3.1.s390x", }, product_reference: "bitcoin-test-0.21.2-bp153.2.3.1.s390x", relates_to_product_reference: "openSUSE Leap 15.3", }, { category: "default_component_of", full_product_name: { name: "bitcoin-test-0.21.2-bp153.2.3.1.x86_64 as component of openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3:bitcoin-test-0.21.2-bp153.2.3.1.x86_64", }, product_reference: "bitcoin-test-0.21.2-bp153.2.3.1.x86_64", relates_to_product_reference: "openSUSE Leap 15.3", }, { category: "default_component_of", full_product_name: { name: "bitcoin-utils-0.21.2-bp153.2.3.1.aarch64 as component of openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3:bitcoin-utils-0.21.2-bp153.2.3.1.aarch64", }, product_reference: "bitcoin-utils-0.21.2-bp153.2.3.1.aarch64", relates_to_product_reference: "openSUSE Leap 15.3", }, { category: "default_component_of", full_product_name: { name: "bitcoin-utils-0.21.2-bp153.2.3.1.ppc64le as component of openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3:bitcoin-utils-0.21.2-bp153.2.3.1.ppc64le", }, product_reference: "bitcoin-utils-0.21.2-bp153.2.3.1.ppc64le", relates_to_product_reference: "openSUSE Leap 15.3", }, { category: "default_component_of", full_product_name: { name: "bitcoin-utils-0.21.2-bp153.2.3.1.s390x as component of openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3:bitcoin-utils-0.21.2-bp153.2.3.1.s390x", }, product_reference: "bitcoin-utils-0.21.2-bp153.2.3.1.s390x", relates_to_product_reference: "openSUSE Leap 15.3", }, { category: "default_component_of", full_product_name: { name: "bitcoin-utils-0.21.2-bp153.2.3.1.x86_64 as component of openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3:bitcoin-utils-0.21.2-bp153.2.3.1.x86_64", }, product_reference: "bitcoin-utils-0.21.2-bp153.2.3.1.x86_64", relates_to_product_reference: "openSUSE Leap 15.3", }, { category: "default_component_of", full_product_name: { name: "bitcoind-0.21.2-bp153.2.3.1.aarch64 as component of openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3:bitcoind-0.21.2-bp153.2.3.1.aarch64", }, product_reference: "bitcoind-0.21.2-bp153.2.3.1.aarch64", relates_to_product_reference: "openSUSE Leap 15.3", }, { category: "default_component_of", full_product_name: { name: "bitcoind-0.21.2-bp153.2.3.1.ppc64le as component of openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3:bitcoind-0.21.2-bp153.2.3.1.ppc64le", }, product_reference: "bitcoind-0.21.2-bp153.2.3.1.ppc64le", relates_to_product_reference: "openSUSE Leap 15.3", }, { category: "default_component_of", full_product_name: { name: "bitcoind-0.21.2-bp153.2.3.1.s390x as component of openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3:bitcoind-0.21.2-bp153.2.3.1.s390x", }, product_reference: "bitcoind-0.21.2-bp153.2.3.1.s390x", relates_to_product_reference: "openSUSE Leap 15.3", }, { category: "default_component_of", full_product_name: { name: "bitcoind-0.21.2-bp153.2.3.1.x86_64 as component of openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3:bitcoind-0.21.2-bp153.2.3.1.x86_64", }, product_reference: "bitcoind-0.21.2-bp153.2.3.1.x86_64", relates_to_product_reference: "openSUSE Leap 15.3", }, { category: "default_component_of", full_product_name: { name: "libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.aarch64 as component of openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3:libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.aarch64", }, product_reference: "libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.aarch64", relates_to_product_reference: "openSUSE Leap 15.3", }, { category: "default_component_of", full_product_name: { name: "libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.ppc64le as component of openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3:libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.ppc64le", }, product_reference: "libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.ppc64le", relates_to_product_reference: "openSUSE Leap 15.3", }, { category: "default_component_of", full_product_name: { name: "libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.s390x as component of openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3:libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.s390x", }, product_reference: "libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.s390x", relates_to_product_reference: "openSUSE Leap 15.3", }, { category: "default_component_of", full_product_name: { name: "libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.x86_64 as component of openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3:libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.x86_64", }, product_reference: "libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.x86_64", relates_to_product_reference: "openSUSE Leap 15.3", }, { category: "default_component_of", full_product_name: { name: "libbitcoinconsensus0-0.21.2-bp153.2.3.1.aarch64 as component of openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3:libbitcoinconsensus0-0.21.2-bp153.2.3.1.aarch64", }, product_reference: "libbitcoinconsensus0-0.21.2-bp153.2.3.1.aarch64", relates_to_product_reference: "openSUSE Leap 15.3", }, { category: "default_component_of", full_product_name: { name: "libbitcoinconsensus0-0.21.2-bp153.2.3.1.ppc64le as component of openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3:libbitcoinconsensus0-0.21.2-bp153.2.3.1.ppc64le", }, product_reference: "libbitcoinconsensus0-0.21.2-bp153.2.3.1.ppc64le", relates_to_product_reference: "openSUSE Leap 15.3", }, { category: "default_component_of", full_product_name: { name: "libbitcoinconsensus0-0.21.2-bp153.2.3.1.s390x as component of openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3:libbitcoinconsensus0-0.21.2-bp153.2.3.1.s390x", }, product_reference: "libbitcoinconsensus0-0.21.2-bp153.2.3.1.s390x", relates_to_product_reference: "openSUSE Leap 15.3", }, { category: "default_component_of", full_product_name: { name: "libbitcoinconsensus0-0.21.2-bp153.2.3.1.x86_64 as component of openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3:libbitcoinconsensus0-0.21.2-bp153.2.3.1.x86_64", }, product_reference: "libbitcoinconsensus0-0.21.2-bp153.2.3.1.x86_64", relates_to_product_reference: "openSUSE Leap 15.3", }, ], }, vulnerabilities: [ { cve: "CVE-2021-3195", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2021-3195", }, ], notes: [ { category: "general", text: "** DISPUTED ** bitcoind in Bitcoin Core through 0.21.0 can create a new file in an arbitrary directory (e.g., outside the ~/.bitcoin directory) via a dumpwallet RPC call. NOTE: this reportedly does not violate the security model of Bitcoin Core, but can violate the security model of a fork that has implemented dumpwallet restrictions.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Package Hub 15 SP3:bitcoin-qt5-0.21.2-bp153.2.3.1.aarch64", "SUSE Package Hub 15 SP3:bitcoin-qt5-0.21.2-bp153.2.3.1.ppc64le", "SUSE Package Hub 15 SP3:bitcoin-qt5-0.21.2-bp153.2.3.1.s390x", "SUSE Package Hub 15 SP3:bitcoin-qt5-0.21.2-bp153.2.3.1.x86_64", "SUSE Package Hub 15 SP3:bitcoin-test-0.21.2-bp153.2.3.1.aarch64", "SUSE Package Hub 15 SP3:bitcoin-test-0.21.2-bp153.2.3.1.ppc64le", "SUSE Package Hub 15 SP3:bitcoin-test-0.21.2-bp153.2.3.1.s390x", "SUSE Package Hub 15 SP3:bitcoin-test-0.21.2-bp153.2.3.1.x86_64", "SUSE Package Hub 15 SP3:bitcoin-utils-0.21.2-bp153.2.3.1.aarch64", "SUSE Package Hub 15 SP3:bitcoin-utils-0.21.2-bp153.2.3.1.ppc64le", "SUSE Package Hub 15 SP3:bitcoin-utils-0.21.2-bp153.2.3.1.s390x", "SUSE Package Hub 15 SP3:bitcoin-utils-0.21.2-bp153.2.3.1.x86_64", "SUSE Package Hub 15 SP3:bitcoind-0.21.2-bp153.2.3.1.aarch64", "SUSE Package Hub 15 SP3:bitcoind-0.21.2-bp153.2.3.1.ppc64le", "SUSE Package Hub 15 SP3:bitcoind-0.21.2-bp153.2.3.1.s390x", "SUSE Package Hub 15 SP3:bitcoind-0.21.2-bp153.2.3.1.x86_64", "SUSE Package Hub 15 SP3:libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.aarch64", "SUSE Package Hub 15 SP3:libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.ppc64le", "SUSE Package Hub 15 SP3:libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.s390x", "SUSE Package Hub 15 SP3:libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.x86_64", "SUSE Package Hub 15 SP3:libbitcoinconsensus0-0.21.2-bp153.2.3.1.aarch64", "SUSE Package Hub 15 SP3:libbitcoinconsensus0-0.21.2-bp153.2.3.1.ppc64le", "SUSE Package Hub 15 SP3:libbitcoinconsensus0-0.21.2-bp153.2.3.1.s390x", "SUSE Package Hub 15 SP3:libbitcoinconsensus0-0.21.2-bp153.2.3.1.x86_64", "openSUSE Leap 15.3:bitcoin-qt5-0.21.2-bp153.2.3.1.aarch64", "openSUSE Leap 15.3:bitcoin-qt5-0.21.2-bp153.2.3.1.ppc64le", "openSUSE Leap 15.3:bitcoin-qt5-0.21.2-bp153.2.3.1.s390x", "openSUSE Leap 15.3:bitcoin-qt5-0.21.2-bp153.2.3.1.x86_64", "openSUSE Leap 15.3:bitcoin-test-0.21.2-bp153.2.3.1.aarch64", "openSUSE Leap 15.3:bitcoin-test-0.21.2-bp153.2.3.1.ppc64le", "openSUSE Leap 15.3:bitcoin-test-0.21.2-bp153.2.3.1.s390x", "openSUSE Leap 15.3:bitcoin-test-0.21.2-bp153.2.3.1.x86_64", "openSUSE Leap 15.3:bitcoin-utils-0.21.2-bp153.2.3.1.aarch64", "openSUSE Leap 15.3:bitcoin-utils-0.21.2-bp153.2.3.1.ppc64le", "openSUSE Leap 15.3:bitcoin-utils-0.21.2-bp153.2.3.1.s390x", "openSUSE Leap 15.3:bitcoin-utils-0.21.2-bp153.2.3.1.x86_64", "openSUSE Leap 15.3:bitcoind-0.21.2-bp153.2.3.1.aarch64", "openSUSE Leap 15.3:bitcoind-0.21.2-bp153.2.3.1.ppc64le", "openSUSE Leap 15.3:bitcoind-0.21.2-bp153.2.3.1.s390x", "openSUSE Leap 15.3:bitcoind-0.21.2-bp153.2.3.1.x86_64", "openSUSE Leap 15.3:libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.aarch64", "openSUSE Leap 15.3:libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.ppc64le", "openSUSE Leap 15.3:libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.s390x", "openSUSE Leap 15.3:libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.x86_64", "openSUSE Leap 15.3:libbitcoinconsensus0-0.21.2-bp153.2.3.1.aarch64", "openSUSE Leap 15.3:libbitcoinconsensus0-0.21.2-bp153.2.3.1.ppc64le", "openSUSE Leap 15.3:libbitcoinconsensus0-0.21.2-bp153.2.3.1.s390x", "openSUSE Leap 15.3:libbitcoinconsensus0-0.21.2-bp153.2.3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2021-3195", url: "https://www.suse.com/security/cve/CVE-2021-3195", }, { category: "external", summary: "SUSE Bug 1181784 for CVE-2021-3195", url: "https://bugzilla.suse.com/1181784", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Package Hub 15 SP3:bitcoin-qt5-0.21.2-bp153.2.3.1.aarch64", "SUSE Package Hub 15 SP3:bitcoin-qt5-0.21.2-bp153.2.3.1.ppc64le", "SUSE Package Hub 15 SP3:bitcoin-qt5-0.21.2-bp153.2.3.1.s390x", "SUSE Package Hub 15 SP3:bitcoin-qt5-0.21.2-bp153.2.3.1.x86_64", "SUSE Package Hub 15 SP3:bitcoin-test-0.21.2-bp153.2.3.1.aarch64", "SUSE Package Hub 15 SP3:bitcoin-test-0.21.2-bp153.2.3.1.ppc64le", "SUSE Package Hub 15 SP3:bitcoin-test-0.21.2-bp153.2.3.1.s390x", "SUSE Package Hub 15 SP3:bitcoin-test-0.21.2-bp153.2.3.1.x86_64", "SUSE Package Hub 15 SP3:bitcoin-utils-0.21.2-bp153.2.3.1.aarch64", "SUSE Package Hub 15 SP3:bitcoin-utils-0.21.2-bp153.2.3.1.ppc64le", "SUSE Package Hub 15 SP3:bitcoin-utils-0.21.2-bp153.2.3.1.s390x", "SUSE Package Hub 15 SP3:bitcoin-utils-0.21.2-bp153.2.3.1.x86_64", "SUSE Package Hub 15 SP3:bitcoind-0.21.2-bp153.2.3.1.aarch64", "SUSE Package Hub 15 SP3:bitcoind-0.21.2-bp153.2.3.1.ppc64le", "SUSE Package Hub 15 SP3:bitcoind-0.21.2-bp153.2.3.1.s390x", "SUSE Package Hub 15 SP3:bitcoind-0.21.2-bp153.2.3.1.x86_64", "SUSE Package Hub 15 SP3:libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.aarch64", "SUSE Package Hub 15 SP3:libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.ppc64le", "SUSE Package Hub 15 SP3:libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.s390x", "SUSE Package Hub 15 SP3:libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.x86_64", "SUSE Package Hub 15 SP3:libbitcoinconsensus0-0.21.2-bp153.2.3.1.aarch64", "SUSE Package Hub 15 SP3:libbitcoinconsensus0-0.21.2-bp153.2.3.1.ppc64le", "SUSE Package Hub 15 SP3:libbitcoinconsensus0-0.21.2-bp153.2.3.1.s390x", "SUSE Package Hub 15 SP3:libbitcoinconsensus0-0.21.2-bp153.2.3.1.x86_64", "openSUSE Leap 15.3:bitcoin-qt5-0.21.2-bp153.2.3.1.aarch64", "openSUSE Leap 15.3:bitcoin-qt5-0.21.2-bp153.2.3.1.ppc64le", "openSUSE Leap 15.3:bitcoin-qt5-0.21.2-bp153.2.3.1.s390x", "openSUSE Leap 15.3:bitcoin-qt5-0.21.2-bp153.2.3.1.x86_64", "openSUSE Leap 15.3:bitcoin-test-0.21.2-bp153.2.3.1.aarch64", "openSUSE Leap 15.3:bitcoin-test-0.21.2-bp153.2.3.1.ppc64le", "openSUSE Leap 15.3:bitcoin-test-0.21.2-bp153.2.3.1.s390x", "openSUSE Leap 15.3:bitcoin-test-0.21.2-bp153.2.3.1.x86_64", "openSUSE Leap 15.3:bitcoin-utils-0.21.2-bp153.2.3.1.aarch64", "openSUSE Leap 15.3:bitcoin-utils-0.21.2-bp153.2.3.1.ppc64le", "openSUSE Leap 15.3:bitcoin-utils-0.21.2-bp153.2.3.1.s390x", "openSUSE Leap 15.3:bitcoin-utils-0.21.2-bp153.2.3.1.x86_64", "openSUSE Leap 15.3:bitcoind-0.21.2-bp153.2.3.1.aarch64", "openSUSE Leap 15.3:bitcoind-0.21.2-bp153.2.3.1.ppc64le", "openSUSE Leap 15.3:bitcoind-0.21.2-bp153.2.3.1.s390x", "openSUSE Leap 15.3:bitcoind-0.21.2-bp153.2.3.1.x86_64", "openSUSE Leap 15.3:libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.aarch64", "openSUSE Leap 15.3:libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.ppc64le", "openSUSE Leap 15.3:libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.s390x", "openSUSE Leap 15.3:libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.x86_64", "openSUSE Leap 15.3:libbitcoinconsensus0-0.21.2-bp153.2.3.1.aarch64", "openSUSE Leap 15.3:libbitcoinconsensus0-0.21.2-bp153.2.3.1.ppc64le", "openSUSE Leap 15.3:libbitcoinconsensus0-0.21.2-bp153.2.3.1.s390x", "openSUSE Leap 15.3:libbitcoinconsensus0-0.21.2-bp153.2.3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", version: "3.1", }, products: [ "SUSE Package Hub 15 SP3:bitcoin-qt5-0.21.2-bp153.2.3.1.aarch64", "SUSE Package Hub 15 SP3:bitcoin-qt5-0.21.2-bp153.2.3.1.ppc64le", "SUSE Package Hub 15 SP3:bitcoin-qt5-0.21.2-bp153.2.3.1.s390x", "SUSE Package Hub 15 SP3:bitcoin-qt5-0.21.2-bp153.2.3.1.x86_64", "SUSE Package Hub 15 SP3:bitcoin-test-0.21.2-bp153.2.3.1.aarch64", "SUSE Package Hub 15 SP3:bitcoin-test-0.21.2-bp153.2.3.1.ppc64le", "SUSE Package Hub 15 SP3:bitcoin-test-0.21.2-bp153.2.3.1.s390x", "SUSE Package Hub 15 SP3:bitcoin-test-0.21.2-bp153.2.3.1.x86_64", "SUSE Package Hub 15 SP3:bitcoin-utils-0.21.2-bp153.2.3.1.aarch64", "SUSE Package Hub 15 SP3:bitcoin-utils-0.21.2-bp153.2.3.1.ppc64le", "SUSE Package Hub 15 SP3:bitcoin-utils-0.21.2-bp153.2.3.1.s390x", "SUSE Package Hub 15 SP3:bitcoin-utils-0.21.2-bp153.2.3.1.x86_64", "SUSE Package Hub 15 SP3:bitcoind-0.21.2-bp153.2.3.1.aarch64", "SUSE Package Hub 15 SP3:bitcoind-0.21.2-bp153.2.3.1.ppc64le", "SUSE Package Hub 15 SP3:bitcoind-0.21.2-bp153.2.3.1.s390x", "SUSE Package Hub 15 SP3:bitcoind-0.21.2-bp153.2.3.1.x86_64", "SUSE Package Hub 15 SP3:libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.aarch64", "SUSE Package Hub 15 SP3:libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.ppc64le", "SUSE Package Hub 15 SP3:libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.s390x", "SUSE Package Hub 15 SP3:libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.x86_64", "SUSE Package Hub 15 SP3:libbitcoinconsensus0-0.21.2-bp153.2.3.1.aarch64", "SUSE Package Hub 15 SP3:libbitcoinconsensus0-0.21.2-bp153.2.3.1.ppc64le", "SUSE Package Hub 15 SP3:libbitcoinconsensus0-0.21.2-bp153.2.3.1.s390x", "SUSE Package Hub 15 SP3:libbitcoinconsensus0-0.21.2-bp153.2.3.1.x86_64", "openSUSE Leap 15.3:bitcoin-qt5-0.21.2-bp153.2.3.1.aarch64", "openSUSE Leap 15.3:bitcoin-qt5-0.21.2-bp153.2.3.1.ppc64le", "openSUSE Leap 15.3:bitcoin-qt5-0.21.2-bp153.2.3.1.s390x", "openSUSE Leap 15.3:bitcoin-qt5-0.21.2-bp153.2.3.1.x86_64", "openSUSE Leap 15.3:bitcoin-test-0.21.2-bp153.2.3.1.aarch64", "openSUSE Leap 15.3:bitcoin-test-0.21.2-bp153.2.3.1.ppc64le", "openSUSE Leap 15.3:bitcoin-test-0.21.2-bp153.2.3.1.s390x", "openSUSE Leap 15.3:bitcoin-test-0.21.2-bp153.2.3.1.x86_64", "openSUSE Leap 15.3:bitcoin-utils-0.21.2-bp153.2.3.1.aarch64", "openSUSE Leap 15.3:bitcoin-utils-0.21.2-bp153.2.3.1.ppc64le", "openSUSE Leap 15.3:bitcoin-utils-0.21.2-bp153.2.3.1.s390x", "openSUSE Leap 15.3:bitcoin-utils-0.21.2-bp153.2.3.1.x86_64", "openSUSE Leap 15.3:bitcoind-0.21.2-bp153.2.3.1.aarch64", "openSUSE Leap 15.3:bitcoind-0.21.2-bp153.2.3.1.ppc64le", "openSUSE Leap 15.3:bitcoind-0.21.2-bp153.2.3.1.s390x", "openSUSE Leap 15.3:bitcoind-0.21.2-bp153.2.3.1.x86_64", "openSUSE Leap 15.3:libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.aarch64", "openSUSE Leap 15.3:libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.ppc64le", "openSUSE Leap 15.3:libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.s390x", "openSUSE Leap 15.3:libbitcoinconsensus-devel-0.21.2-bp153.2.3.1.x86_64", "openSUSE Leap 15.3:libbitcoinconsensus0-0.21.2-bp153.2.3.1.aarch64", "openSUSE Leap 15.3:libbitcoinconsensus0-0.21.2-bp153.2.3.1.ppc64le", "openSUSE Leap 15.3:libbitcoinconsensus0-0.21.2-bp153.2.3.1.s390x", "openSUSE Leap 15.3:libbitcoinconsensus0-0.21.2-bp153.2.3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2022-03-03T19:01:19Z", details: "important", }, ], title: "CVE-2021-3195", }, ], }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
Title of the comment
Description of the comment
Loading…
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.